Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0F7F7F6A072311ED8067812FC4F9AE02.roa
File: 0F7F7F6A072311ED8067812FC4F9AE02.roa (raw, json)
Hash identifier: IaM5JoKkMFAzjZpn+sEYIwIyVW6+qhIz6t87EVXHjEI=
Subject key identifier: 05:8A:0B:04:61:B5:8A:EC:D1:D6:81:D3:34:E4:0F:86:A5:2C:C3:5D
Certificate issuer: /CN=A913900D/serialNumber=C603786D55A904124E7592EED2899EF578921100
Certificate serial: 7CE9
Authority key identifier: C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0F7F7F6A072311ED8067812FC4F9AE02.roa
Signing time: Mon 16 Sep 2024 17:25:04 +0000
ROA not before: Mon 16 Sep 2024 17:25:04 +0000
ROA not after: Fri 31 Oct 2025 00:00:00 +0000
asID: 2914
IP address blocks: 103.13.80.0/22 maxlen: 23
202.68.64.0/20 maxlen: 23
203.4.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31977 (0x7ce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913900D
Validity
Not Before: Sep 16 17:25:04 2024 GMT
Not After : Oct 31 00:00:00 2025 GMT
Subject: CN=66e869f0-28be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:85:c0:b6:c4:a6:21:92:11:73:73:14:41:
ae:16:10:bd:7c:73:9f:3a:71:09:93:c0:02:de:5f:
e1:e5:64:a2:5a:6a:ba:51:a6:00:6d:c8:bc:f0:0d:
38:da:2d:1d:99:af:60:5b:fc:96:13:16:4b:02:64:
66:e3:c2:03:9f:7e:1b:01:03:e5:5a:c6:4b:41:c8:
49:d8:1a:89:85:36:80:44:d2:c2:9c:db:7a:32:5d:
f5:7e:0f:06:10:96:36:5d:89:04:90:f6:7c:ba:21:
0d:51:82:77:ab:d4:21:22:47:8d:a2:65:ae:f0:74:
a2:5d:fb:4d:50:09:23:40:c5:ed:1a:da:7b:02:33:
31:a4:79:bc:33:f1:84:bc:c8:d6:4e:67:03:a0:b7:
c3:60:db:81:e2:a9:22:28:72:22:f3:c5:cc:32:05:
83:b0:14:02:08:a1:7c:c1:19:b4:31:43:45:62:08:
a6:54:f0:48:eb:a4:34:9c:6d:50:c7:02:79:59:b0:
38:10:3b:06:12:a5:82:7c:e8:74:5d:9f:40:0c:49:
cb:2b:f3:c5:1a:fd:c3:40:60:41:17:f5:94:40:0a:
48:0f:7e:f1:80:00:b0:4e:9e:1b:a6:c2:2f:4e:63:
d8:3f:b7:3e:f4:7d:d4:87:31:8e:d7:f1:f7:fe:71:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8A:0B:04:61:B5:8A:EC:D1:D6:81:D3:34:E4:0F:86:A5:2C:C3:5D
X509v3 Authority Key Identifier:
keyid:C6:03:78:6D:55:A9:04:12:4E:75:92:EE:D2:89:9E:F5:78:92:11:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/xgN4bVWpBBJOdZLu0ome9XiSEQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xgN4bVWpBBJOdZLu0ome9XiSEQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913900D/FCDCD3A0AC9D11E892CDAD0DC4F9AE02/0F7F7F6A072311ED8067812FC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.13.80.0/22
202.68.64.0/20
203.4.212.0/22
Signature Algorithm: sha256WithRSAEncryption
06:58:6b:0c:15:df:fe:00:2b:b0:83:b3:0a:90:d6:c0:ab:86:
01:fb:3b:53:0a:dd:ed:94:4f:d8:5c:8c:3c:65:bb:dc:f2:6e:
38:17:99:43:20:4d:f4:13:0d:3b:98:78:8d:b8:7b:7c:29:f3:
70:0a:f8:4b:88:e8:55:b0:3e:e0:9a:39:a0:3f:a6:66:cb:3a:
a8:41:01:b9:57:5d:d4:8b:c5:28:bd:23:3a:ee:76:94:e7:97:
f8:11:5d:6f:bd:66:db:92:47:71:f5:87:c3:0d:c3:d5:f0:b3:
19:07:2a:6c:06:b0:fa:a0:c1:a8:64:a2:b3:03:a8:b1:6e:a8:
ff:35:f6:d0:35:26:8c:37:55:42:34:01:98:a3:0d:39:18:bf:
88:39:da:0f:88:ee:67:5f:2f:36:fd:95:18:aa:7b:72:f2:dd:
c0:54:be:1d:fc:5f:66:b4:02:37:03:34:6b:45:da:c1:93:93:
c4:eb:75:ad:a5:c9:f0:a1:48:e4:c8:a5:3b:2f:62:5e:54:49:
7e:37:65:30:ee:aa:34:ac:ec:5b:9a:ff:e3:32:4b:1d:fc:04:
ff:8e:b0:15:5f:73:2f:fc:42:1f:3a:af:86:37:b7:51:8a:83:
f6:f1:1d:5f:37:c2:52:24:5a:ec:f5:1d:f6:62:8d:5b:80:aa:
cf:c9:0c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:17:14 2025 by rpki-client